Cyberattacks targeting water supply systems have been reported in at least 12 US states, with American authorities investigating whether the attacks were carried out by hackers linked to Iran.
Among the states affected are Michigan, Minnesota, Georgia, New Jersey and South Dakota. In Minnesota alone, more than 30 community water systems have reportedly been affected.
In Georgia, a cyberattack against the Clayton County Water Authority, which supplies water to around 300,000 people in the Atlanta area, caused a drop in water pressure and prompted authorities to issue a precautionary boil-water advisory. Service was restored within several hours.
In some cases, attackers gained access to remote control systems used to operate pumps, valves and water-pressure controls. Several operators were forced to switch to manual operations after losing electronic control of critical equipment.
US authorities have stressed, however, that there is currently no indication that the attacks have compromised the quality or safety of drinking water.
The FBI, Environmental Protection Agency (EPA) and Cybersecurity and Infrastructure Security Agency (CISA) have warned that cyber attackers have gained access to online systems at some water and wastewater facilities, resulting in the loss of monitoring and control functions.
Authorities have urged water utilities to disconnect critical systems from the internet where possible and strengthen cybersecurity measures, including password protections and network security.
The incidents have raised fresh concerns over the vulnerability of US water infrastructure to cyberattacks, particularly as many utilities rely on internet-connected systems to monitor and control essential operations.
